Hi every one
how can generate a report Client Missing Patch Report "missing patches on client PCs "
↧
missing patches on client PCs
↧
landesk 9.5 reporting
Hi there ,
I am trying to build / generate a report that shows what patchs installed or what failed on approximately 650 devices , is this possible to do , I have tried under patch and compliance , under the repair task , but does not show you where installed and did not , only shows where the patchs scanned , detected , and repair failed
is there any easy way to find out even what Microsoft critical patchs and service packs and office updates are needed on all clients ?
any advise greatly appreciated
thanks
↧
↧
I need to push a batch file down to delete a registry key
I need to push a batch file down to delete a registry key but the UAC keeps appearing on the client computer. Is there a way around that?
↧
Machine Mapping with USMT profile restore?
I've been searching, but haven't been able to answer this question: can Machine Mapping be used to restore a profile with USMT on a new computer? (We are on 9.6 SP2)
I've played around a bit with the SMA profile restoration and can restore a profile on a new computer using the Machine Mapping. The negative of SMA is that it is no longer supported by Lenovo and the latest documentation they have is from 2009. I would rather use an utility that is current and supported.
I have created a template that captures the profile off to a network share and then kicks off another template to load the OS and licensed software with the Machine Mapping tool. This process works really well and I would like to be able to add the profile restore action to the kicked off template. When specifying the store to capture the profile to in the capture template, I use the %ldhostname% variable for the store path: \\server\share\profiles\%ldhostname% . The launched template with the profile restore action will have a different name and thus the %ldhostname% will be different than the source computer.
To back up a bit, I create a Bare Metal Server for the new computer (COMPUTER2) and map COMPUTER1 to COMPUTER2 in machine mapping. We prefer to have a unique name for the second machine, but we would need to keep one machine name through this process, we may consider going that route.
Has anyone done this and if so, how did you do it?
Thanks.
↧
Batch SD Task fails after reboot despite batch reporting success
I've got a batch software distribution task that has agent settings configured to always act as if a reboot is needed and prompt for a reboot after the batch is complete.
The batch finishes without error, then the end user is prompted for reboot. Relevant portions from task log:
*successful run of install above*
C:\Program Files (x86)\LANDesk\LDClient\sdmcache\Packages\Juniper\JunosPulse5.0r11>SENDTASKSTATUS.EXE -core=*redacted* -taskid=345 -retcode=0 -complete
C:\Program Files (x86)\LANDesk\LDClient\sdmcache\Packages\Juniper\JunosPulse5.0r11>"C:\Program Files (x86)\LANDesk\LDClient\sdistbat.exe" /setbatchstatus=0
Fri, 16 Oct 2015 08:50:10 Installation result DB50000
Fri, 16 Oct 2015 08:50:10 Rebooting system if needed
Fri, 16 Oct 2015 08:50:24 processing of package is complete, result 229392420 (0x0dac4024 - code 16420)
The user is then prompted to defer the reboot or reboot immediately. At this point, the result reported on the core is 'Task will continue after reboot'
After the user reboots, the result changes to 'Task has been started' then to 'Unknown' with a status of Failed.
It appears that the task is attempting to pick up where it left off after the user reboots, but there isn't anything to do as the batch distribution has already finished. Here's the same log after reboot:
Fri, 16 Oct 2015 08:52:55 ******* sdclient starting to process task *******
Fri, 16 Oct 2015 08:52:55 Task id to process: 345
Fri, 16 Oct 2015 08:52:55 Command line: /policyfile="C:\ProgramData\LANDesk\Policies\CP.345._jtBhKWeh7Nfj55hkDqP0oTHz/nE=.xml" /reconnect
Fri, 16 Oct 2015 08:52:55 The nostatus flag has NOT been set.
Fri, 16 Oct 2015 08:52:55 Core name '*redacted*' obtained from active task list
Fri, 16 Oct 2015 08:52:55 Sending task status, cmd line -coreandip=*redacted* -taskid=345 -retcode=229392442 "-ldap=*redacted*" -pkgid=324
Fri, 16 Oct 2015 08:52:58 The nostatus flag has NOT been set.
Fri, 16 Oct 2015 08:52:58 Core name '*redacted*' obtained from active task list
Fri, 16 Oct 2015 08:52:58 Sending task status, cmd line -coreandip=*redacted* -taskid=345 -retcode=229392258 "-ldap=*redacted*" -pkgid=324
Fri, 16 Oct 2015 08:53:00 processing of package is complete, result -1918091264 (0x8dac4000 - code 16384)
Any ideas on how to get this to report as a success?
EDIT: 9.6 SP2
↧
↧
CSA Cipher suites
What are the supported cipher suites on the CSA.
currently i'm set to RC4-SHA:HIGH!ADH:!IDEA
trying to figure out what other high ciphers i can use.
thanks
George
↧
Ping Discovery Service constantly crashing on a Mac.
Has anyone else seen the pds2d service constantly crashing and restarting on a Mac? I have now seen it on a 10.9.5 and a 10.10.2 Mac. A reinstall of the client only seems to fix it until the next reboot. We are running Landesk Management Suite 9.6.
↧
Ctrl A stops working in LDMS 9.6 SP2??
Does anybody have a fix for this??
Ever since I updated to 9.6 SP2, the Ctrl+A or holding down the SHIFT key to select multiple computers stops working. I have to close the console and go back into it for the key combos to work again.
↧
Core Synchronization help requested before opening a support ticket
We've never utilized the Core Sync function until now. Yesterday we configured, tested the connection to sync from our PROD core, and set Agent Configurations and Agent Settings to auto sync to the DEV core. As of this morning, there are no items sync'd to the DEV core.
We followed the following in our efforts:
https://community.landesk.com/support/docs/7402
We used our LANDESSvc account to handle this task and verified the LANDesk Admin account status on both cores. Is there something I'm missing or failing to do?
I found plenty of setup instructions but nothing that set any expectation of what to see, how long to wait for the sync, etc...
↧
↧
Cloud Service Appliance Enhancement Series - Part 1
Overview
The Cloud Service Appliance (CSA, also formally known as the Gateway) is a great tool for managing off network assets with LANDESK Management suite. However, administrators cannot easily fix common issues with the CSA when HTTP (80) traffic is not allowed through the firewalls. This document is meant to provide a walk-through to successfully update the files that define these hyperlinks on the CSA. Since this is the first part of the series, we will be going into more details than usual. The additional detail is provided to cover all possible aspects of the process. Even if HTTP (80) traffic is allowed in your environment, it is strongly recommended you review this document before moving on to more advanced topics in the series.
Scenario: Fixing links when HTTP (80) traffic is not allowed.
In this scenario we start with a typical CSA configuration. Connectivity to the core has been established and agents have been configured to utilize the CSA. The security team did not approve HTTP (port 80) traffic through the firewall to the CSA for security reasons. Agents only communicate over HTTPS which is great, but we notice some of the link on the CSA web interface no longer work. We will walk-through fixing the links in this document and video.
Tools Required
- LANDESK Management Suite 9.5 or higher
- Cloud Service Appliance (r4.3)
- Putty (or other SSH tool)
- FileZilla (or other FTP client)
- Notepad++ (or other text editor)
Recommendations
- Always backup your good files before making changes.
- Always document your changes.
- Proceed with caution!
Disclaimer
- LANDESK Disclaimer: https://community.landesk.com/support/docs/DOC-27482
- LANDESK will likely not support your CSA or any of the changes referenced in this document if you implement them. RennerBrown and / or the author of this document is not responsible for any issues that occur due to changes implemented / referenced in this document.
RennerBrown Professional Services
If you are not comfortable with SSH, sFTP, XML, HTML and Linux based operating systems, but would like these changes implemented in your environment, contact RennerBrown Professional Services. For more information check out http://www.rennerbrown.com/
Video Walk-through
If you prefer to watch this walk-through instead, you can find it here: https://youtu.be/fh5oa4xai30
Documentation
Due to the length of this process, the attached document contains the majority of the walk-through.
↧
Computer Vulnerability Compliance in Query
Apologies if this is in the wrong place. Feel free to relocate the thread if need be.
LANDesk version: 9.60.3.64
In the Patch and Compliance summary menu, there is a field labeled "Computers with the most detections". You can thereby refine it to a scope if you want only specific machines within the limit of said scope. Double clicking on the list brings up all computers (or whatever scope you have defined) and a field called "value", displaying how many patches that machine is behind. Can this "value" field be added to a normal query, and where can it be found inside of the Machine Components list in the query options?
Thank you for your help,
Devin
↧
Query for Processors and cores on servers?
Hi All,
Im trying to produce a query to show the amount of Processors and cores on a servers. Im currently looking at "processor count" and "Cores per Package" but it seems inaccurate i have a server with 2 processors, 16 cores however LDMS seems to report 2 processors and 4 cores. Has anyone else had simular issues? I have a large amount of servers that are reporting wrong and only few that are right.
↧
Search for devices that end with a particular code
In my company we have a specific naming convention for our devices. We are looking to see all devices ending in "SD" or "SF" so we can removed software from them.
How would I be able to create a query to see this?
Can I do a wildcard search? Our naming goes like AA000001SD and looking for the last two characters.
↧
↧
3 Reboots Needed after November's Patches
I know this month's patch release is a big one, but I don't really recall WSUS requiring all these reboots. Has anyone else experienced multiple reboots on large patch releases where certain patches are required to be installed in a certain order? Example below:
[1]Note that update 3101746 in MS15-115 and update 3101246 in MS15-122 are releasing concurrently with update 3081320 in this bulletin, MS15-121. Customers who intend to install all three updates manually on Windows 7 Service Pack 1 or Windows Server 2008 R2 Service Pack 1 should install the updates in the following order: 3101246 first, 3081320 second, and 3101746 third (this is taken care of automatically for customers with automatic updating enabled). For more information see the Known Issues section of Microsoft Knowledge Base Article 3105256.
↧
Is there more information around power usage than just the built power report?
The Historical and Cost Savings reports in Power Management seems to only give a roll up and not any actual usage numbers per PC. is there more that can be extracted to show actual usage per computer? a summary report is not enough data for my management..
↧
Application error 1000 avp.exe
I recently installed LANDESK Antivirus on a new Dell M4800 Precision laptop, Disk 0 is a 7200 RPM drive, Disk 1 is a SSD primary boot drive, Windows 7 Pro. I have installed av on about 80 other desktops and laptops, none of them are having the issue this one is. When I login the LANDESK av appears to be working fine, but after a minute or two the service stops. It will restart (probably the Recovery option for the service), but then stops again.
I have reinstalled the av a couple of times, disabled services, stopped some apps from running on logon and nothing has helped. The Windows Application Event Logs shows this error over and over:
Log Name: Application
Source: Application Error
Date: 11/12/2015 8:31:20 AM
Event ID: 1000
Task Category: (100)
Level: Error
Keywords: Classic
User: N/A
Computer: pc1.xxx.xxx
Description:
Faulting application name: avp.exe, version: 10.2.1.23, time stamp: 0x52961dcf
Faulting module name: KERNELBASE.dll, version: 6.1.7601.18869, time stamp: 0x556363be
Exception code: 0xc0000005
Fault offset: 0x0000dd82
Faulting process id: 0x1488
Faulting application start time: 0x01d11d5f1ef6da1e
Faulting application path: C:\Program Files (x86)\LANDesk\LDClient\antivirus\kav10\avp.exe
Faulting module path: C:\Windows\syswow64\KERNELBASE.dll
Report Id: 6bb5cd84-8952-11e5-8a71-7c5cf82ccdaf
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Application Error" />
<EventID Qualifiers="0">1000</EventID>
<Level>2</Level>
<Task>100</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2015-11-12T15:31:20.000000000Z" />
<EventRecordID>11913</EventRecordID>
<Channel>Application</Channel>
<Computer>pc1.xxx.xxx</Computer>
<Security />
</System>
<EventData>
<Data>avp.exe</Data>
<Data>10.2.1.23</Data>
<Data>52961dcf</Data>
<Data>KERNELBASE.dll</Data>
<Data>6.1.7601.18869</Data>
<Data>556363be</Data>
<Data>c0000005</Data>
<Data>0000dd82</Data>
<Data>1488</Data>
<Data>01d11d5f1ef6da1e</Data>
<Data>C:\Program Files (x86)\LANDesk\LDClient\antivirus\kav10\avp.exe</Data>
<Data>C:\Windows\syswow64\KERNELBASE.dll</Data>
<Data>6bb5cd84-8952-11e5-8a71-7c5cf82ccdaf</Data>
</EventData>
</Event>
↧
I need to copy a file into a users profile
We are trying to distribute an outlook signature file to %appdata%\microsoft\signatures but it seems to be failing due to local system trying to execute as opposed to the logged on user. Was hoping to do this automatically via patch, but seems like the only option here is to use Software Dist? or am i missing something here?
↧
↧
Launching Packages
Hi all,
I do have the following question and looking for help.
Our Office 2013 base setup is as default in English.
For all other regions we do offer the Menus and Help in their native language. This is done via the Microsoft Language Packs.
For those Associates keeping Menus and Help in English and do require spellcheck, thesaurus etc. in their native language, we do additionally offer the Microsoft Proofing Tools.
All of these add-ons we do make available in the Portal Manager:
17 Language Packs
24 Proofing Tools
All together 41 Packages
If I will enable all 41 Packages in the Portal Manager, this is confuseing the Associates if do believe.
My plan is to show in the Portal only one Package for the Language Pack and another for the Proofing tools.
Launching one of these does bring up a Menu with checkboxes and an OK button (both isn’t my problem). Here the Associate can choose what Language will be installed.
e.g.:
Microsoft Language Pack setup:
- German
- Italian
- French
- Etc.
OK
Is there a way to launch a specific Package via command line or executable?
Like: sdclient.exe /launch=”Packagename”
↧
How can I get a user name that is currently logged in?
I can getthe name ofthe user whois loggedin the system?
It is desirable toobtain this informationfrom the database.
↧
use own certificate from CA
Is it possible to use a certificate in LDMS from our own internal CA?
I know this all works fine but there are a couple of areas within LDMS, Software Licensing Monitoring for one, that when clicked on present a certificate warning.
This is obviously due to the fact that the self generated certificate on the Core server is not trusted by our clients in IE only by the LDMS agent.
We have our own CA so can I use a certificate from there?
Rob
↧